Stormshield Stormshield Network Security
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-111088 | 4.3.0 – 4.3.44 ; 4.8.0 – 4.8.19 ; 5.0.0 – 5.0.9 ; … | Stored XSS in the VPN logs monitor | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-113810 | 4.8.0 – 4.8.19 ; 5.0.0 – 5.0.9 ; 5.1.0 – 5.1.3 | Stored XSS on SNS Enrollment Portal | HIGH 7.0 | 0.1 % | ||
| CVE-2026-113808 | 4.3.0 – 4.3.44 ; 4.8.0 – 4.8.19 ; 5.0.0 – 5.0.9 ; … | Stored XSS on SNS Enrollment Portal | HIGH 7.1 | 0.2 % | ||
| CVE-2026-113469 | 4.3.0 – 4.3.44 ; 4.8.0 – 4.8.19 ; 5.0.0 – 5.0.9 ; … | Improper Signature Verification of Active Update Files | HIGH 7.5 | 0.2 % | ||
| CVE-2026-113465 | 5.0.0 – 5.0.9 ; 5.1.0 – 5.1.3 | Possible DOM XSS in SNS Web Administration Portal | MEDIUM 6.6 | 0.2 % | ||
| CVE-2026-111090 | 4.3.0 – 4.3.44 ; 4.8.0 – 4.8.19 ; 5.0.0 – 5.0.9 ; … | Improper Signature Verification of Firmware Update Files | HIGH 7.8 | 0.2 % | ||
| CVE-2026-14466 | 4.8.0 – 4.8.16 ; 5.0.0 – 5.0.6 | Possible XSS in the SNS web administration panel | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-8482 | 4.3.0 – 4.3.41 ; 4.8.0 – 4.8.15 ; 5.0.0 – 5.0.5 | Information leak in NSRPC client history | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-8480 | 4.3.0 – 4.3.41 ; 4.4.0 – 4.8.15 ; 5.0.2 EA – 5.0.5 | Connection possible to the Administration portal with a revoked certificate | MEDIUM 4.3 | 0.1 % | ||
| CVE-2026-8474 | 4.3.0 – 4.3.41 ; 4.8.0 – 4.8.15 ; 5.0.0 – 5.0.5 | Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances. | MEDIUM 5.3 | 0.2 % |